This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: ySxelXswLPQdOaSFiafBVOvkPBxVCwj4kqeEtYdDCPM= Subject key identifier: 1B:C2:C9:24:0F:E1:05:3E:BD:1D:34:67:A8:C3:24:C6:15:B3:9B:32 Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 3AE2CA138A345B3145091B6239D78D60D465A5C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 0225 Signing time: Tue 16 Dec 2025 13:40:40 +0000 Manifest this update: Tue 16 Dec 2025 13:35:40 +0000 Manifest next update: Sat 20 Dec 2025 01:26:40 +0000 Files and hashes: 1: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: 4WSncZJuduln21ro9xhpKeTp2SR+L1bpXAWwiM1Ibys=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e2:ca:13:8a:34:5b:31:45:09:1b:62:39:d7:8d:60:d4:65:a5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Dec 16 13:35:40 2025 GMT Not After : Dec 20 01:26:40 2025 GMT Subject: CN=1BC2C9240FE1053EBD1D3467A8C324C615B39B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:ed:4d:28:52:f7:11:2f:32:82:63:1a:06: 09:97:ad:50:6a:8f:0a:97:7c:40:72:87:b5:76:d5: ee:35:9e:68:0f:40:9b:77:b7:d3:37:3d:93:27:ac: cf:28:7d:c4:42:fb:8e:f3:67:28:a8:88:67:36:8e: 64:3c:60:2e:d9:47:7e:6d:86:8b:6f:cc:4c:b1:54: 86:37:ab:d3:90:32:95:be:46:f2:3d:34:5e:ac:3a: 7e:04:98:66:75:6b:36:50:04:b7:75:14:7f:62:9e: b0:58:6b:86:88:cb:d8:40:db:71:e0:ba:4a:ef:15: 1f:da:2c:3b:ee:3f:7b:3d:11:03:7f:e5:ca:3e:e1: 45:f9:3c:ae:18:ae:45:17:65:13:52:9c:94:e4:65: 6a:07:af:be:e9:9c:5b:25:2a:6b:e0:47:52:62:4b: 67:83:95:b9:c3:7e:bb:2b:c7:59:ca:cb:ee:17:2f: c2:c7:12:ff:14:a5:c4:c3:f4:18:d8:2b:5c:7f:2b: 52:e1:8c:19:5f:9f:b0:82:ee:ba:e0:b0:55:1a:78: c1:b0:bd:f7:a5:5e:47:97:ea:1e:90:4d:84:a1:d4: 1b:1b:c1:28:a8:7a:fb:de:8b:18:0e:13:e1:02:79: 1e:99:39:08:1b:c6:b3:a4:56:c7:0e:21:29:21:83: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:C9:24:0F:E1:05:3E:BD:1D:34:67:A8:C3:24:C6:15:B3:9B:32 X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ed:be:d8:63:db:02:60:33:07:46:6f:c0:9e:00:0d:aa:5f: ba:26:d9:02:e6:97:60:f8:b5:1e:85:7e:37:68:93:c8:5d:ec: bd:c1:ca:d6:ad:33:1d:93:72:29:60:81:e4:1f:d1:70:da:b3: 66:77:7c:c6:a0:fa:ec:40:e5:cd:28:8e:82:44:1c:7c:2c:af: 01:a5:b5:0d:9f:64:ce:20:58:dd:37:f0:7d:e9:b8:8a:c2:1f: 81:ca:9a:3b:35:06:59:b2:c8:1a:9e:7a:01:10:6a:b2:b2:2d: c5:b9:ec:87:34:ac:a6:1c:a4:73:90:58:f4:cf:8e:59:58:cc: 02:0a:2a:92:7f:9a:7d:48:48:5e:a5:a2:e0:7c:b5:0f:23:3f: f7:20:59:19:61:c8:ad:0f:3e:b1:a2:f1:9b:3e:2d:41:10:d9: 7f:f5:08:ba:a2:19:9c:fb:ba:03:44:89:e7:45:18:e4:ff:55: 7f:ed:fc:db:59:ee:30:34:93:14:0d:3b:f4:99:7e:01:e3:50: da:3a:5b:0c:b6:9a:30:fd:54:9b:16:88:fa:52:4e:73:15:ae: e5:9b:2b:d6:30:65:35:7d:c7:fb:be:bf:0e:c6:7b:84:b8:d4: a3:1d:2b:f1:7d:18:86:42:05:29:a6:23:1e:3a:9f:df:c3:c7: bd:e5:31:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuLKE4o0WzFFCRtiOdeNYNRlpckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNTEyMTYxMzM1NDBaFw0yNTEyMjAwMTI2NDBaMDMxMTAvBgNV BAMTKDFCQzJDOTI0MEZFMTA1M0VCRDFEMzQ2N0E4QzMyNEM2MTVCMzlCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8a+1NKFL3ES8ygmMaBgmXrVBq jwqXfEByh7V21e41nmgPQJt3t9M3PZMnrM8ofcRC+47zZyioiGc2jmQ8YC7ZR35t hotvzEyxVIY3q9OQMpW+RvI9NF6sOn4EmGZ1azZQBLd1FH9inrBYa4aIy9hA23Hg ukrvFR/aLDvuP3s9EQN/5co+4UX5PK4YrkUXZRNSnJTkZWoHr77pnFslKmvgR1Ji S2eDlbnDfrsrx1nKy+4XL8LHEv8UpcTD9BjYK1x/K1LhjBlfn7CC7rrgsFUaeMGw vfelXkeX6h6QTYSh1BsbwSioevveixgOE+ECeR6ZOQgbxrOkVscOISkhgzc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG8LJJA/hBT69HTRnqMMkxhWzmzIwHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELtvthj2wJgMwdGb8CeAA2qX7om2QLml2D4 tR6Ffjdok8hd7L3BytatMx2TcilggeQf0XDas2Z3fMag+uxA5c0ojoJEHHwsrwGl tQ2fZM4gWN038H3puIrCH4HKmjs1BlmyyBqeegEQarKyLcW57Ic0rKYcpHOQWPTP jllYzAIKKpJ/mn1ISF6louB8tQ8jP/cgWRlhyK0PPrGi8Zs+LUEQ2X/1CLqiGZz7 ugNEiedFGOT/VX/t/NtZ7jA0kxQNO/SZfgHjUNo6Wwy2mjD9VJsWiPpSTnMVruWb K9YwZTV9x/u+vw7Ge4S41KMdK/F9GIZCBSmmIx46n9/Dx73lMfI= -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:41 2025 by rpki-client